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THE EMBODIMENTS OF THE INVENTION IN WHICH AN EXCLUSIVE PROPERTY 
OR PRIVILEGE IS CLAIMED ARE DEFINED AS FOLLOWS: 

1 . X method of authenticating a pair of correspondents in a communication system, 
sai(i method comprising the steps of: 

ExchViging cryptographic keys between said corespondents, said exchange being 

based on a public key mutual authentication scheme; and 

using saidykeys for encrypting data in a symmetric-key data exchange. 

2. A method as darned in claim 1 , a first of said correspondents being a mobile station 
and a second of s^d^orrespondents being a base station. 

3. A method as defined in claim 2, said mutual authentication including the steps of: 
said base station transmit'dng a shpr/tl^rm public key along with an identifier to said 
mobile station; \ 

said mobile station combiningvitsfprhjat^key with said base station session public 
key and generating a pair of shaJfe^secretVkeys therefrom wherein a first of said keys 
is used for mutual authentication between said mobile station and said base station 
and a second of said keys is used for establishing a secret session key. 

4. A method as defined in claim 3, including\he steps of: 

said mobile station computing an authentication string using the first of said keys 
and transmitting same to said base station as a registration request 

\ 

5. A method as defined in claim 3, including the steps df : 

said base station retrieving said mobile station public k^y and using said mobile 
station public key and its short-lived private key for completing a second pair of 
shared secret keys; 
comparing said first keys; and 

computing a pair of session keys for transmission to the mobile kation. 
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A meth63"feiLinutual authenticatiqd "between a base station and a mobile station 
comprising the steps oTT 

illtseTno^-tiie^base station using its private key; 
the base station authenticatingytself to tfte mobile^taHoajj^ing^ mobile station's 
public key obtained by said base station from a trusted corresponc 



15 



